Cisco 2100 Series Configuration Manual page 669

Chapter 13 Configuring Hybrid REAPWireless Device Access
Figure 13-14
h. To allow a hybrid-REAP access point to authenticate clients using LEAP, check the Enable LEAP
Authentication check box; then go to
i. To allow a hybrid-REAP access point to authenticate clients using EAP-FAST, check the Enable
EAP-FAST Authentication check box; then go to the next step. The default value is unchecked.
Perform one of the following, depending on how you want protected access credentials (PACs) to
j.
be provisioned:
•
•
In the Authority ID field, enter the authority identifier of the EAP-FAST server. The identifier must
k.
be 32 hexadecimal characters.
In the Authority Info field, enter the authority identifier of the EAP-FAST server in text format. You
l.
can enter up to 32 hexadecimal characters.
To specify a PAC timeout value, check the PAC Timeout check box and enter the number of seconds
m.
for the PAC to remain viable in the edit box. The default value is unchecked, and the valid range is
2 to 4095 seconds when enabled.
n. Click Apply to commit your changes.
Step 14 Click Save Configuration to save your changes.
Step 15 Repeat this procedure if you want to add more hybrid-REAP groups.
Note
OL-17037-01
HREAP Groups > Edit (Local Authentication > Protocols) Page
To use manual PAC provisioning, enter the server key used to encrypt and decrypt PACs in the
Server Key and Confirm Server Key fields. The key must be 32 hexadecimal characters.
To allow PACs to be sent automatically to clients that do not have one during PAC provisioning,
check the Enable Auto Key Generation check box.
To see if an individual access point belongs to a hybrid-REAP group, you can click Wireless >
Access Points > All APs > the name of the desired access point > the H-REAP tab. If the access
point belongs to a hybrid-REAP group, the name of the group appears in the HREAP Group
Name field.
Step n.
Cisco Wireless LAN Controller Configuration Guide
Configuring Hybrid-REAP Groups
13-21